Businesses Private clients
Get remote help Help
How companies settle invoices SWIFT bank transfer or card Checking that an invoice really came from Apply PDF invoices and related paperwork
Slovenščina English
Send an enquiry
Services
Solutions
Pricing
Courses
Articles
About Apply
Contact
Send an enquiry
Browse the catalogue: 80 services in 18 areas
Managed IT support Hand routine IT chores to a remote team and keep your people focused on clients End-to-end IT support One contract and one predictable bill for laptops, servers and Microsoft 365 IT helpdesk Stuck colleagues reach a technician in minutes, not the next morning Service desk Tracked tickets with clear owners, deadlines and a monthly recap 24/7 support Overnight and weekend cover for businesses where downtime is not an option Plans: Start, Business, Premium Prices start at €450 monthly plus VAT, response targets fixed by contract
Service plans and SLAs Pick a 4-hour, 1-hour or 15-minute response and get monthly proof we hit it System administration Patching, identities and servers handled to a timetable, fully documented IT infrastructure Find out what is really holding you back before spending on new hardware Network and telephony Network audits, continuous monitoring and phone calls moved onto Teams Cloud and hostingNew Virtual, dedicated and storage capacity in EU data centres such as Hetzner or OVHcloud Backup and recovery Immutable copies beyond the reach of ransomware, with restore drills on the calendar
GDPR and data protection The paperwork a Slovenian controller needs, from processing records to processor contracts Security policies and documentation Short, readable rules your staff sign and genuinely stick to Security tooling roll-out Selection, deployment and tuning of EDR, mail filters and MFA Infrastructure security Visitors on guest Wi-Fi kept well apart from the finance server Application security Catch weaknesses in in-house code before release day Data leak prevention (DLP) Payroll spreadsheets and client databases stay where they belong Database security Every query against sensitive tables leaves a trace Web application firewall (WAF) Bots and SQL injection filtered out before they touch your checkout Access control and endpoint security Remote lock for mislaid laptops and MFA on every account VPN and encryption Secure connections to company systems whether at home, in a hotel or on a construction site Vulnerability scanning See your exposed weak spots first, ahead of any intruder Antivirus and EDR Behavioural detection catches what signature scanning misses SOC monitoring Round-the-clock log review, with action taken on genuine threats System hardening Unneeded ports and services closed on every Windows and Linux host Safe use of AI Agreed ground rules before client data ends up in ChatGPT or similar tools
Websites and web applications Brochure sites, shops, portals, SEO and upkeep: fourteen services in one area E-commerce and integrations Shop, Amazon, Minimax, Stripe and GLS working from shared stock and order data Custom software Move workflows out of spreadsheets into an application built for them Software testing and QA Bugs caught in testing, not by your buyers
Artificial intelligenceNew Practical AI projects aimed at a measurable business need Data and analytics A single warehouse and consistent figures instead of spreadsheet sprawl IT consulting and audit Impartial advice before you commit budget to a major IT project Digital marketing Find out which campaigns actually pay off
Software and licensing Genuine licences for dev and IT teams, with renewals tracked for you Training Live courses over video, from Microsoft 365 essentials to spotting phishing
Unsure what to tackle first? A brief remote check-up ends with a written list of five priorities Request a review
See all 13 solutions together
NIS2 readiness Risk assessment, incident planning and supplier security for NIS2 and ZInfV-1 GDPR compliance Processing records through to a breach procedure, delivered as a set Remote and hybrid work Protected access and managed laptops for staff outside the office Business continuity A rehearsed plan for the day a key server goes down
Retail and e-commerce Web shop, marketplaces, payments and couriers connected end to end Manufacturing ERP and plant network kept running across every shift Clinics and healthcare Stronger safeguards around patient records in surgeries and private practices Construction Office and site crews working from one current set of drawings Logistics and transport WMS, e-CMR and vehicle tracking available whenever the trucks roll
Small businesses Simple IT at a known monthly price for teams of five to twenty Mid-sized companies Support under an SLA plus regular security work as headcount grows Large enterprises Extra hands and niche expertise to back up your internal IT department Multi-site companies Headquarters and every branch in Slovenia on one IT standard
No match for your situation? Tell us about the company in a couple of lines and we will suggest the right services Ask for advice
Who we are The people behind Apply and why we work only remotely Articles Practical pieces about IT and security Paying us Invoices, SWIFT transfers or payment by card Contact Write via the form or by email, or book a video call
Service · Cybersecurity

Database security

Accounts software, a web shop and a booking tool look completely different to the user. Underneath, each relies on a data store, which is what an intruder actually wants. Picture a Ljubljana accountancy practice of twelve people. Its ledger software sits on SQL Server using the built-in “sa” superuser and a password that has been shared around for years, and the SQL port was opened on the firewall during the pandemic so someone could work from her kitchen table. Nobody shut it afterwards. Elsewhere, a WooCommerce retailer accumulates database dumps in a web folder anyone could download. On screen, both businesses see nothing wrong. The weakness is a level below. That level is our focus: who connects, with what privileges and from where; whether data and logs are protected; and whether a backup can genuinely be brought back to life. Microsoft, MySQL, MariaDB and PostgreSQL engines are all familiar territory, on your own hardware or hosted. Where the database belongs to a commercial package, we agree each change with the vendor and carry it out online, outside your busy hours.

Ask about this service See the scope
Individual logins
apps, admins and reports each with their own
Not internet-facing
the database port stays private
Encryption
stored, transmitted and backed up
Test restores
scheduled, because a backup alone proves nothing

Scope of the service

We handle the common engines wherever they run: a server cupboard, Azure, AWS or European providers such as Hetzner and OVHcloud. If the database belongs to packaged software, the supplier or reseller approves changes first.

Check the scope with an engineer

Privileges

Every application connects with its own minimal login, administrators use personal ones and reporting tools only read. Default superusers such as “sa” or “root” are switched off or locked down hard.

Who can connect

Only servers with a real need may reach the database. People working from home reach it only via VPN or the app server.

Encryption

TDE or encrypted volumes, TLS on the connection from app to database, encrypted backup files. Encryption keys are documented and stored apart from the data.

Audit records

Sign-ins, rights changes and lookups in tables holding salaries, customer accounts or medical histories are captured in a store the DBA cannot wipe single-handedly.

Updates

Engine patches follow a timetable, after checking which version your software vendor certifies. End-of-life versions receive an upgrade path.

Backups that work

Backup sets live where neither everyday users nor the web server can touch them, in immutable form, with written and rehearsed recovery steps.

How the work runs

A business stands on its databases, so every change comes with a copy, a sign-off and an exit route.

01

Discovery

Database servers, versions, connected applications and existing logins are listed. Expect at least one abandoned test copy or leftover from an old application.

02

Review

Configuration, rights, exposure, encryption and backups are compared against CIS guidance and vendor manuals; findings come sorted by severity.

03

Changes

Carried out remotely in an agreed window with your software partner, with a complete backup taken before each one.

04

Proving recovery

We bring a backup back in an isolated environment, confirm the application starts and the data is whole, and record how long it took.

Until you have restored it, a backup is a hope rather than a plan. Attackers target backups early, and many victims only then learn that nobody remembers the recovery procedure. Regular test restores cost little and are skipped far too often.

Your questions answered

We stay away from schemas, tables and how the application account behaves, limiting ourselves to server configuration, admin logins, network rules, encryption and backup. Each step is still shown to your software partner beforehand, since certain items, for example the application login's privileges, need their approval.

With shared hosting our reach is limited to accounts, passwords, where backups go and how the app connects. Give us a VPS or a dedicated machine and the full programme applies. The first review tells us which applies.

Set up carefully, hardly at all. We record touches on sensitive tables and privilege changes, not every query, then monitor speed for a few weeks and trim if necessary.

If it is out of vendor support, yes: newly found holes stay open. Until then, exposure is cut back even more and logging tightened. The lasting answer is upgrading, so we identify a version your software partner supports and draft a migration plan.

More services in this area

Open the area page
Service GDPR and data protection Processing records, processor contracts, safeguards and a ready plan for when a breach happens Service Security policies and documentation A policy, risk register and procedures that match daily reality Service Security tooling roll-out Choosing, trialling and deploying protection remotely Service Infrastructure security Perimeter clean-up, network zoning and controlled outside access

Harden the layer your applications rely on

Tell us which database engines you run and on what infrastructure, and we will point out early warning signs and propose a review.

When we work
Weekdays 9:00-17:00 CET, answers the same or next working day
Calls
Video meetings, Teams and Meet both welcome

We set essential cookies only: the ones that keep the site running and recall which town you chose. Nothing for ads and nothing that follows you around the web. Details are in our privacy and data protection notice.